When storing data (D1), spread on a memory (10), into a file storage unit (50), a user α assigns a meaningful filename-for-user, such as “sales book for April.” storage control unit (35) converts this “sales book for April” to a meaningless filename-for-storage, such as “RST123.” The correspondence between the two is stored as filename correspondence information for user α in a correspondence information storage unit (80). A storage processing unit (30) stores the data (D1) with the filename, “RST123.” Whereas when user α is presented with a list of filenames of the stored files from a filename presentation unit (60), the meaningful filename of “sales book for April” is presented as the filename since a presentation control unit (65) performs reverse conversion of the filename based on the filename correspondence information, the meaningless filename of “RST123” is presented to other users. Security in regard to filenames can thus be secured and inference of the file contents can be prevented.
|
13. A file storage/read-out method that makes a computer system execute a storage process of storing data as a file with a certain filename into a file storage unit and a readout process of reading out data in a file stored in the file storage unit when a storing or reading-out instruction is given from a user who is logged in,
said method making the computer system execute,
in the storage process:
a storing user recognition step of recognizing a user who is logged in at a present time;
a storage filename input step of inputting a filename-for-user to be assigned to a file to be stored;
a filename conversion step of converting the filename-for-user to a filename-for-storage based on a predetermined algorithm;
a correspondence information storage step of storing information, indicating a correspondence between the filename-for-user and the filename-for-storage, as filename correspondence information which relates to a user who is logged in, separate and independent filename correspondence information being stored according to each individual user; and
a file storage step of storing the file to be stored into the file storage unit under the filename-for-storage instead of the filename-for-user; and
in the readout process:
a reading user recognition step of recognizing a user who is logged in at a present time;
a readout filename input step of inputting a filename-for-user for specifying a file to be read out;
a filename referencing step of referencing a filename-for-storage, corresponding to the input filename-for-user, based on the filename correspondence information which relates to a user who is logged in; and
a file readout step of reading out a file stored in the file storage unit under the filename-for-storage, obtained by the referencing, as the file to be read out.
1. A computer system comprising: a memory, whereon data are spread; a program execution unit, applying processes, based on a predetermined program, to the data spread on the memory; a file storage unit, storing files formed of predetermined data; a storage processing unit, storing the data, spread on the memory, into the file storage unit as a file having a certain filename when a storing instruction is given from a user who is logged in; a filename presentation unit, presenting, to a user, filenames corresponding to the respective files stored in the file storage unit; an spread processing unit, spreading, on the memory, data inside a file corresponding to a specific filename selected by the user from among the filenames presented by the filename presentation unit; and a user interface unit, serving an interface function with respect to the user;
the computer system further comprising:
a user recognition unit, recognizing a user who is logged in at a present time;
a storage control unit, which, when the storage processing unit is storing a file, inputs a filename-for-user from the user who is logged in, executes a filename conversion process of converting the filename-for-user to a filename-for-storage based on a predetermined algorithm, and provides to the storage processing unit an instruction to perform storage using the filename-for-storage instead of the filename-for-user;
a correspondence information storage unit, which, when the filename conversion process is carried out by the storage control unit, stores information, indicating a correspondence between the filename-for-user and the filename-for-storage, as filename correspondence information which relates to the user who is logged in, said correspondence information storage unit storing separate and independent filename correspondence information relating to each individual user;
a presentation control unit, which, when the filename presentation unit is performing a presentation of filenames, references filename correspondence information which relates to the user who is logged in from inside the correspondence information storage unit and provides an instruction to present the filename-for-user in place of the filename-for-storage based on the filename correspondence information referenced; and
a spread control unit, which, when the spread processing unit spreads data, inputs an instruction of selection of a filename-for-user from the user who is logged in, references filename correspondence information which relates to the user who is logged in from inside the correspondence information storage unit, executes a filename conversion process of converting the selected filename-for-user to a filename-for-storage based on the filename correspondence information referenced, and provides, to the spread processing unit, an instruction to spread data in a file with the filename-for-storage resulting from the conversion.
2. The computer system according to
the storage control unit executes the filename conversion process by generating a filename-for-storage that contains at least algorithmically random codes.
3. The computer system according to
the correspondence information storage unit stores a correspondence table, indicating a correspondence between a filename-for-user and a filename-for-storage, as the filename correspondence information.
4. The computer system according to
the storage control unit executes the filename conversion process from a filename-for-user to a filename-for-storage by generating a filename-for-storage based on an algorithm for reversible conversion.
5. The computer system according to
the correspondence information storage unit stores information, indicating the reversible conversion algorithm used in the filename conversion process, as the filename correspondence information.
6. The computer system according to
the storage control unit executes the filename conversion process on the entirety of a filename, including an extension portion.
7. The computer system according to
the storage control unit executes a conversion process of converting not only a filename but also contents of timestamps or other attribute information that are stored along with a file,
the correspondence information storage unit executes a process of storing, as the filename correspondence information, not just a correspondence of filenames but also a correspondence of attribute information before and after the conversion process; and
the spread control unit executes a process of restoring converted attribute information based on the correspondence of attribute information before and after the conversion process.
8. The computer system according to
the correspondence information storage unit executes a process of encrypting and then storing the filename correspondence information and executes, upon receiving a reference of the stored filename correspondence information, a process of decrypting and then presenting the information to be referenced.
9. The computer system according to
the correspondence information storage unit is arranged from a portable information storage medium that can be freely attached to and detached from a main body of the computer system.
10. The computer system according to
functions of the storage control unit, the spread control unit, and the presentation control unit are realized by incorporating a dedicated application program in a computer and the storage control unit, the spread control unit, and the presentation control unit are made to operate only when said program is started up.
11. The computer system according to
the file storage unit is arranged from a plurality of data storage devices that are configured distributedly,
the storage processing unit is provided with a function of dividing a file to be stored into a plurality of partition files and storing the respective partition files in different data storage devices,
the spread processing unit is provided with a function of synthesizing and thereby restoring the plurality of partition files, respectively stored in different data storage devices, to an original file and then spreading the original file on the memory, and
the correspondence information storage unit is provided with a function of storing filename correspondence information indicating a correspondence of a “single filename-for-user” to a “plurality of filenames-for-storage,” used as respective filenames of the partition files.
12. A computer readable storage medium including a program making a computer function as the storage control unit, the spread control unit, and the presentation control unit of the computer system according to
14. The file storage/read-out method according to
the readout filename input step is executed by a method whereby filenames-for-user corresponding to respective files stored in the file storage unit are referenced and displayed in a list based on the filename correspondence information and a user is made to select a specific filename from among the filenames displayed in the list.
|
This application is a continuation of application Ser. No. 10/587,057 filed on Jul. 21, 2006 now U.S. Pat. No. 7,542,997, which is a 371 of PCT/JP2005/001045 filed on Jan. 20, 2005, which designated the U.S., claims the benefit thereof, and incorporates the same by reference.
This invention relates to a computer system and a method for storing and reading files and particularly relates to a technical art by which the security is improved in regard to filenames during file storage.
In general, data in a computer system are handled in file units and storing and reading processes are also executed respectively in file units. Thus, in order to distinguish individual files from each other, predetermined filenames must be assigned to the respective files. In storing a file in a general application program, a user is enabled to assign an arbitrary filename to the file to be stored. Normally, the user assigns a filename that is considered to be optimal for enabling the contents, preparation date/time, etc., of the file to be stored to be ascertained readily.
There are application programs with which a function of automatically assigning a predetermined filename based on specific rules is prepared. For example, Japanese Unexamined Patent Publication No. 2001-188697 discloses an art, wherein when a file is placed in a particular folder to be monitored, a predetermined filename is assigned automatically to the file and the file is stored in a predetermined folder with a hierarchical structure.
As mentioned above, generally in saving a file, a user assigns a filename relevant to the contents of the file to be stored. Also, even in cases where a filename is automatically assigned as in the art disclosed in the above-mentioned Patent Document, a filename that is somehow related to the contents of file is generally assigned. For example, in the case of a data file for an accounting process, by assigning a filename, such as “sales book for April,” it can be understood at once that the file is that of sales data for April. Likewise, in the case of a customer data file, by assigning a filename such as “company X customer file,” it can be recognized immediately that the file is that of data concerning customers of company X.
Thus, from the standpoint of a user who prepares a specific file and uses this file thereafter, assigning of a filename related to the contents of the file is extremely important for improving convenience. However, from the standpoint of security, such assignment of a filename based on convenience is not preferable. For example, the contents of a data file with the filename, “sales book of April,” can be readily inferred by any person. When a list of such filenames is seen by another user, the type of information contained in the respective files will be made known without opening of the individual files.
Recently, due to the spread of LAN, numerous computers are connected via networks and it is not infrequent that one sees a list of files prepared by another person via the networks. Thus, if there is a possibility that the contents of a file can be inferred from the filename, the possibility of encountering such damages as an important file being copied illicitly or the file itself being destroyed or deleted by a user of malicious intent becomes high. As a matter of course, setting of access rights, encryption of data files, and other arts for protecting data files from attacks by illicit means are also employed. However, in regard to the security of a filename itself, measures that have been taken up until now are by no means adequate and there are many opportunities for lists of filenames to be seen by numerous users.
An object of this invention is thus to provide a computer system enabling adequate security to be ensured even for filenames and another object is to provide such a method for storing and reading files.
(1) The first feature of the present invention resides in a computer system comprising: a memory, whereon data are spread; a program execution unit, applying processes, based on a predetermined program, to the data spread on the memory; a file storage unit, storing files formed of predetermined data; a storage processing unit, storing the data, spread on the memory, into the file storage unit as a file having an instructed, predetermined filename; a filename presentation unit, presenting, to a user, filenames corresponding to the respective files stored in the file storage unit; an spread processing unit, spreading, on the memory, data inside a file corresponding to a specific filename selected by the user from among the filenames presented by the filename presentation unit; and a user interface unit, serving an interface function with respect to the user;
the computer system further comprising:
a user recognition unit, recognizing a user who is logged in at the present time;
a storage control unit, which, when the storage processing unit is storing a file, inputs a filename-for-user from the user who is logged in, executes a filename conversion process of converting the filename-for-user to a filename-for-storage based on a predetermined algorithm, and provides to the storage processing unit an instruction to perform storage using the filename-for-storage;
a correspondence information storage unit, which, when the filename conversion process is carried out by the storage control unit, stores information, indicating a correspondence between the filename-for-user and the filename-for-storage, as filename correspondence information for the user who is logged-in;
a presentation control unit, which, when the filename presentation unit is performing a presentation of filenames, references the filename correspondence information for the logged-in user from inside the correspondence information storage unit and provides an instruction to present the filename-for-user in place of the filename-for-storage based on the filename correspondence information referenced; and
an spread control unit, which, when the spread processing unit spreads data, inputs an instruction of selection of a filename-for-user from the logged-in user, references the filename correspondence information for the logged-in user from inside the correspondence information storage unit, executes a filename conversion process of converting the selected filename-for-user to a filename-for-storage based on the correspondence information referenced, and provides, to the spread processing unit, an instruction to spread data in a file with the filename-for-storage resulting from the conversion.
(2) The second feature of the present invention resides in a computer system according to the first feature, wherein:
the storage control unit executes the filename conversion process by generating a filename-for-storage that contains random codes based on an algorithm using random numbers.
(3) The third feature of the present invention resides in a computer system according to the first or second feature, wherein:
the correspondence information storage unit stores a correspondence table, indicating a correspondence between a filename-for-user and a filename-for-storage, as the filename correspondence information.
(4) The fourth feature of the present invention resides in a computer system according to the first feature, wherein:
the storage control unit executes the filename conversion process from a filename-for-user to a filename-for-storage by generating a filename-for-storage based on an algorithm for reversible conversion.
(5) The fifth feature of the present invention resides in a computer system according to the fourth feature, wherein:
the correspondence information storage unit stores information, indicating the reversible conversion algorithm used in the filename conversion process, as the filename correspondence information.
(6) The sixth feature of the present invention resides in a computer system according to the first to fifth features, wherein:
the storage control unit executes the filename conversion process on the entirety of a filename, including an extension portion.
(7) The seventh feature of the present invention resides in a computer system according to the first to sixth features, wherein:
the storage control unit executes a conversion process of converting not only a filename but also contents of timestamps or other attribute information that are stored along with a file,
the correspondence information storage unit executes a process of storing, as the filename correspondence information, not just a correspondence of filenames but also a correspondence of attribute information before and after the conversion process; and
the spread control unit executes a process of restoring converted attribute information based on the correspondence of attribute information before and after the conversion process.
(8) The eighth feature of the present invention resides in a computer system according to the first to seventh features, wherein:
the correspondence information storage unit executes a process of encrypting and then storing the filename correspondence information and executes, upon receiving a reference of the stored filename correspondence information, a process of decrypting and then presenting the information to be referenced.
(9) The ninth feature of the present invention resides in a computer system according to the first to eighth features, wherein:
the correspondence information storage unit is arranged from a portable information storage medium that can be freely attached to and detached from a main body of the computer system.
(10) The tenth feature of the present invention resides in a computer system according to the first to ninth features, wherein:
functions of the storage control unit, the spread control unit, and the presentation control unit are realized by incorporating a dedicated application program in a computer and the storage control unit, the spread control unit, and the presentation control unit are made to operate only when said program is started up.
(11) The eleventh feature of the present invention resides in a computer system according to the first to tenth features, wherein:
the file storage unit is arranged from a plurality of data storage devices that are configured distributedly,
the storage processing unit is provided with a function of dividing a file to be stored into a plurality of partition files and storing the respective partition files in different data storage devices,
the spread processing unit is provided with a function of synthesizing and thereby restoring the plurality of partition files, respectively stored in different data storage devices, to an original file and then spreading the original file on the memory, and
the correspondence information storage unit is provided with a function of storing filename correspondence information indicating a correspondence of a “single filename-for-user” to a “plurality of filenames-for-storage,” used as respective filenames of the partition files.
(12) The twelfth feature of the present invention resides in a program making a computer function as the storage control unit, the spread control unit, and the presentation control unit of the computer system according to the first to eleventh features.
(13) The thirteenth feature of the present invention resides in a file storage/read-out method that makes a computer system execute a storage process of storing data as a file with a predetermined filename into a file storage unit and a readout process of reading out data in a file stored in the file storage unit,
said method making the computer system execute,
in the storage process:
a storing user recognition step of recognizing a user who is logged in at the present time;
a storage filename input step of inputting a filename-for-user to be assigned to a file to be stored;
a filename conversion step of converting the filename-for-user to a filename-for-storage based on a predetermined algorithm;
a correspondence information storage step of storing information, indicating a correspondence between the filename-for-user and the filename-for-storage, as filename correspondence information for a user who is logged in; and
a file storage step of storing the file to be stored into the file storage unit under the filename-for-storage; and
in the readout process:
a reading user recognition step of recognizing a user who is logged in at the present time;
a readout filename input step of inputting a filename-for-user for specifying a file to be read out;
a filename referencing step of referencing a filename-for-storage, corresponding to the input filename-for-user, based on the filename correspondence information for a user who is logged in; and
a file readout step of reading out a file stored in the file storage unit under the filename-for-storage, obtained by the referencing, as the file to be read out.
(14) The fourteenth feature of the present invention resides in a file storage/read-out method according to the thirteenth feature, wherein:
the readout filename input step is executed by a method whereby filenames-for-user corresponding to respective files stored in the file storage unit are referenced and displayed in a list based on the filename correspondence information and a user is made to select a specific filename from among the filenames displayed in the list.
With this invention, since filenames that are actually used for storing are changed automatically, adequate security can be ensured even for filenames.
This invention shall now be described based on the illustrated embodiments.
As mentioned above, memory 10 is a storage area on which data to be processed by program execution unit 20 are spread temporarily, and data for which processing has been completed are transferred from memory 10 to file storage unit 50. That is, file storage unit 50 is a component that stores predetermined data as files, and in actuality, a hard disk device, floppy disk device, or other magnetic recording device, a CD-R, CD-RAM, DVD-R, DVD-RAM, or other optical recording device, or an MO recording device or other magneto-optic device, etc., is used as file storage unit 50. In the FIGURE, a state wherein three files F1 to F3 are stored in file storage unit 50 is illustrated. Specifically, file F1 is stored under the filename, “sales book for April,” file F2 is stored under the filename, “sales book for May,” and file F3 is stored under the filename, “sales book for June.” In the illustrated example, of these three files, the contents of file F1 are spread on memory 10 as “data D1 of the sales book for April” and subject to processing by program execution unit 20. When the necessary processing of “data D1 of the sales book for April” is completed, data D1 can be stored again inside file storage unit 50 as file F1 having the filename, “sales book for April.”
Storage processing unit 30 is a component that executes a storage process (save process) of storing data spread on memory 10 as a file with a predetermined designated filename into file storage unit 50, and oppositely, spread processing unit 40 is a component that executes an spread process (load process) of reading out data in a specific file selected by a user from among the files stored in file storage unit 50 and spreading the data on memory 10 (that is, in the case of a general application program, a process of opening the specific file). Filename presentation unit 60 serves a function of presenting predetermined filenames, corresponding to the respective files stored in file storage unit 50, to the user. In actuality, storage processing unit 30, spread processing unit 40, and filename presentation unit 60 are realized by driver programs and OS program portions that concern the storage devices that make up file storage unit 50.
User interface unit 70 is a component that serves an interface function with respect to the user and carries out the necessary information transactions between the user and the system comprising the respective components described above. Specifically, a keyboard, mouse, etc., are used as devices for the user to perform input operations with respect to the system, and a monitor, speakers, etc., are used as devices for the system to perform output operations with respect to the user. User interface unit 70 is a component formed of a complex of these input/output devices.
Via user interface unit 70, the user can perform transactions with program execution unit 20, input predetermined data and instructions into program execution unit 20, and obtain execution results as outputs. Also, in storing the data spread on memory 10 into file storage unit 50, the user can instruct a predetermined storage filename to storage processing unit 30 from user interface 70. Storage processing unit 30 executes the storage process under the filename instructed by the operator. For example, when an input of instructing the filename, “sales book for April,” to be the “storage filename” is made, storage processing unit 30 executes the process of storing data D1, spread on memory 10, as file F1 with the filename, “sales book for April,” into file storage unit 50.
The operator can also be presented with a filename list from filename presentation unit 60 via user interface unit 70. For example, in the case of the illustrated example, since the three files F1 to F3 are stored in file storage unit 50, filename presentation unit 60 performs a process of presenting, to the user, the filenames, “sales book for April,” “sales book for May,” and “sales book for June,” corresponding to the three files. When the user performs an input operation of selecting, via user interface unit 70, a specific filename from among the filenames presented by filename presentation unit 60, this selection is transmitted to spread processing unit 40 as an instruction of the “spread filename,” and spread processing unit 40 executes the spread process of spreading, on memory 10, the data in the file corresponding to the specific filename selected by the user. For example, when the user selects the filename, “sales book for April,” this filename is transmitted as the spread filename to spread processing unit 40 and spread processing unit 40 executes the process of spreading data D1 in file F1 in file storage unit 50 on memory 10.
Though the basic arrangement of a conventional computer system was described above using the block diagram illustrating the components involved in the file storage and read-out processes, as mentioned above, such a conventional computer system is inadequate in terms of security with respect to filenames. For example, with the example shown in
User recognition unit 90 is a component with a function of recognizing the user who is logged in at the present time. In the illustrated example, an “α in circle” mark is indicated in the block of user recognition unit 90, and this indicates that the user who is currently logged in is “user α.” Though this user recognition unit 90 is not drawn in the computer system shown in
Meanwhile, storage control unit 35, spread control unit 45, and presentation control unit 65 are components having functions of providing predetermined instructions to and thereby controlling storage processing unit 30, spread processing unit 40, and filename presentation unit 60, respectively. The functions of these components shall now be described in order.
When storage processing unit 30 stores a file, storage control unit 35 serves the functions of inputting a “filename-for-user” from the user who is logged in, executing a filename conversion process of converting this “filename-for-user” to a “filename-for-storage” based on a predetermined algorithm, and provides to storage processing unit 30 an instruction to perform storage using the “filename-for-storage” obtained by the conversion.
Here, for the sake of convenience, the functions of this storage control unit 35 shall be described with a specific example of processes that are performed when a task of storing data D1, spread on memory 10, is performed by user α while user α is logged in. As was described in Section 1, in storing data D1, user α performs an input of instructing the filename (filename for specifying file to be stored) to be assigned to data D1 via user interface unit 70. Here, the filename instructed by user α shall be referred to as the “filename-for-user.” This “filename-for-user” is literally a filename for the user and a character string that is considered to be most suitable for ascertaining the contents of the data file is normally used. Since in the illustrated example, data D1 is the data of the sales book for April, the description shall be continued with the filename, “sales book for April,” being instructed as the “filename-for-user.”
With the conventional computer system described with
When the conversion from the “filename-for-user” to the “filename-for-storage” has been carried out, storage control unit 35 transmits the “filename-for-storage” after conversion to storage processing unit 30 and provides to storage processing unit 30, an instruction to perform storage using the “filename-for-storage.” Thus, with the above example, storage processing unit 30 executes the storage process of storing data D1, on memory 10, into file storage unit 50 not under the filename-for-user of “sales book for April” but under the filename-for-storage of “RST123.” File F1, stored in the illustrated file storage unit 50, is the file that has thus been stored. Files F2 and F3 are also files stored under the “filenames-for-storage” through the same processes.
Consequently, though the three files F1 to F3, stored in file storage unit 50 in
When the filename conversion process has thus been performed by storage control unit 35, information indicating the correspondence between the “filename-for-user” and the “filename-for-storage” are stored as filename correspondence information concerning the logged-in user into correspondence information storage unit 80. With the illustrated example, a state is shown wherein a correspondence table, indicating the correspondence for the three files, is stored in correspondence information storage unit 80 as the filename correspondence information for user α who is logged in. That is, a correspondence table, indicating that “RST123” corresponds to “sales book for April,” “UVW456” corresponds to “sales book for May,” and “XYZ789” corresponds to “sales book for June,” is prepared inside correspondence information storage unit 80. Such a correspondence table is prepared since the process of storing the illustrated three files F1 to F3 in file storage unit 50 has been performed. The filename correspondence information prepared in correspondence information storage unit 80 is referenced by spread control unit 45 and presentation control unit 65 as shall be described later.
Presentation control unit 65 serves a function of slightly modifying the display processing function of filename presentation unit 60. As described above, filename presentation unit 60 has the function of presenting, to the user, the filename list of files stored in file storage unit 50. However, since the respective files are stored under the “filenames-for-storage” in file storage unit 50 as in the illustrated example, if filename presentation unit 60 presents the filenames as they are, user α will not be able to check the filenames with the “filenames-for-user” that were assigned by him/herself. Thus, when filename presentation unit 60 performs the presentation of filenames, presentation control unit 65 provides an instruction to reference the filename correspondence information for the logged-in user from inside correspondence information storage unit 80 and present the “filenames-for-user” instead of the “filenames-for-storage” based on the correspondence information that were referenced. More specifically, presentation control unit 65 performs a process of converting the “filenames-for-storage” that were about to be presented by filename presentation unit 60 to the “filenames-for-user” by referencing the “filename correspondence information.”
With the example shown in
Meanwhile, when spread processing unit 40 spreads data, spread control unit 45 inputs the selection instruction of a “filename-for-user” from the user who is logged in, references the “filename correspondence information” for the logged-in user from inside correspondence information storage unit 80, executes the filename conversion process of converting the selected “filename-for-user” to a “filename-for-storage” based on the correspondence information that were referenced, and provides to spread processing unit 40 an instruction to spread the data inside the file with the “filename-for-storage” resulting from the conversion.
With the example shown in
Thus, with this invention's computer system shown in
Firstly, the procedures of a storage process, by which data on memory 10 are stored in file storage unit 50 as a file with a predetermined filename, shall be described. First, a storing user recognition step, wherein the user who is logged in at the present time is recognized by user recognition unit 90, is carried out. A storage filename input step, of inputting the “filename-for-user” to be assigned to the file to be stored (data D1 in the illustrated example) by means of storage control unit 35, is then carried out, and a filename conversion step, of converting the “filename-for-user” to a “filename-for-storage” based on a predetermined algorithm is carried out. Furthermore, a correspondence information storage step, of storing information, indicating the correspondence between the “filename-for-user” and the “filename-for-storage,” as the “filename correspondence information” for the user who is logged in, is carried out. In the case of the above example, the filename-for-user, “sales book for April,” is converted to the filename-for-storage, “RST123,” and the information indicating the correspondence between “sales book for April” and “RST123” is stored in correspondence information storage unit 80 as the “filename correspondence information” for user α. A file storage step, of storing the file (data D1) to be stored in memory 10 under the filename-for-storage, “RST123,” by means of storage processing unit 30, is then executed.
Oppositely to perform a readout process of reading out data in a file stored in file storage unit 50, first, a reading user recognition step, wherein the user who is logged in at the present time is recognized by user recognition unit 90, is carried out. A readout filename input step, wherein the “filename-for-user” for specifying the file to be read out is input by means of spread control unit 45, is carried out, and furthermore, a filename referencing step, of referencing the “filename-for-storage,” corresponding to the input “filename-for-user,” based on the “filename correspondence information” for the logged-in user, is carried out. Lastly, a file readout step, wherein the file stored in file storage unit 50 under the “filename-for-storage,” obtained by the referencing, is read out as the file to be read out by means of spread processing unit 40, is executed. In the case of the above example, when user α, who is logged in, inputs the filename-for-user, “sales book for April,” the “filename correspondence information” for user α is referenced so that the filename-for-storage, “RST123,” which corresponds to the input filename-for-user, is referenced and read out onto memory 10.
Actually, when the readout process is performed, the filenames of the files stored in file storage unit 50 are presented to user α in the state of having been converted to the “filenames-for-user.” This is because, as described above, the processes, of referencing and performing the list display of the “filenames-for-user” corresponding to the respective files stored in file storage unit 50 based on the “filename correspondence information” for the user α that is stored in correspondence information storage unit 80, are executed by filename presentation unit 60 and presentation control unit 65. By a method of selecting a specific filename from among the filenames displayed in the list, user α can perform the task of inputting the filename-for-user, “sales book for April.”
The characteristics of the computer system shown in
A second characteristic of this system is that since the proper user α can always perform file designation with the “filename-for-user,” assigned by user α him/herself, user α does not need to be aware of the existence of “filenames-for-storage” at all, even for a file to be read out from file storage unit 50 and spread on memory 10. Since in actuality, the filenames presented by filename presentation unit 60 to user α are the filenames-for-user of “sales book for April,” “sales book for May,” and “sales book for June,” user α can feel as if the three files F1 to F3 are stored in file storage unit 50 with these filenames as they are. Moreover, even for designating a file to be read out from file storage unit 50 and spread on memory 10, designation by the filename-for-user is carried out. For example, when the designation, “sales book for April,” is made, the corresponding file of the filename-for-storage, “RST123,” will be automatically referenced by spread control unit 45 and the reading process is carried out on file F1 as described above. Since for user α, it will thus seem as if just file operations using the “filenames-for-user” are being carried out, the operability will be no different from a conventional computer system.
A third characteristic of the present system is that even in a multi-user environment in which the use of the same computer system is shared by a plurality of users, adequate security can be ensured in regard to filenames. This characteristic shall now be described by way of a more specific example. Here, a case where a user α, who is an accounting staff, and a user β, who is a sales staff, share the use of the same computer system, such as shown in
The manners in which the filenames of the six files F1 to F6, stored in file storage unit 50, are presented when the respective users log in are illustrated in
Such a filename list display is carried out since presentation control unit 65 references the filename correspondence information for the currently logged-in user from inside correspondence information storage unit 80. For example, when user α is logged in, since the correspondence table of filename correspondence information for user α, shown at the left side of
The same applies to environments shared by three or more users, and whereas files stored by one's self are displayed with the “filenames-for-user,” files stored by others are displayed with the “filenames-for-storage.” The same also applies in cases where another computer system is logged into via a network, and though the existence of files stored by others can be recognized from the filename list, the files, for which filenames that enable the inference of the file contents can be recognized, are limited to the files stored by one's self.
As a matter of course, since the present invention is not an art of restricting the access to files stored by others, if when user α is logged in, the filename list shown in
The present invention is an art that provides the effect of keeping secret the filenames of files stored by one from others and is not an art of restricting access rights. However, the effect that the proper filenames, listed in a filename list, of files besides those stored by one's self are kept secret is an important effect from the viewpoint of ensuring security related to filenames. As a matter of course, for practical use, this invention's art may be used in combination with an art of restricting access rights as necessary.
Actually, it is not difficult to apply the present invention in an existing computer system. For practical use, this invention's computer system can be structured by incorporating a dedicated application program in a personal computer or other existing computer.
Thus, in applying this invention to this general computer system, portions that are to serve the functions of storage control unit 35, spread control unit 45, and presentation control unit 65 are added as illustrated as an added software 300 (dedicated application program) to the computer system. This added software 300 executes the respective functions in linkage with basic software 200.
Correspondence information storage unit 80 can be realized using an arbitrary storage device prepared in an existing computer system. With the illustrated example, correspondence information storage unit 80 is provided on an external storage medium 400. This external storage medium 400 is a portable information storage medium that is removable with respect to the main body of the computer system. For example, a flash memory device or IC card, etc., may be used as external storage medium 400. By thus providing correspondence information storage unit 80 on external storage medium 400 and enabling the carrying of this external storage medium 400 upon removal from the computer system main body in the logged-out state, the security concerning filenames can be improved further.
By providing the functions of storage control unit 35, spread control unit 45, and presentation control unit 65 as a dedicated application program as shown in
Another embodiment of this invention shall now be described.
A characteristic of the computer system shown in
Storage processing unit 30A stores this file F1 (data D1) on memory 10 into file storage unit 50, and in this process, executes a process of dividing the file F1 to be stored into a plurality of partition files and storing the respective partition files into different data storage devices. For example,
With the example shown in
Such division of a single file into a plurality of partition files and storing of the respective partition files in different data storage devices that are configured distributedly is useful for improving security concerning file access. For example, when the internet is used as network 55, numerous file server devices that are positioned distributedly across the whole world can be used respectively as individual data storage devices. Thus, if management information, which indicates by which method and into how many partition files file F1 was divided and indicates into which data storage devices the individual partition files were stored by storage processing unit 30A, is not available, the respective files that were stored upon division cannot be read out and synthesized to be restored to the original file F1. Moreover, with the present invention, since the filename-for-user, “sales book for April,” which the user assigned to file F1 to be stored, is converted by storage control unit 35A into the filenames-for-storage, “JKK777,” “LMM888,” and “PQQ999,” and the actual partition files are stored under these filenames-for-storage, the security concerning filenames can also be ensured adequately.
Actually, even if data storage device 51, shown in
When proper user α is to use the file stored under the filename, “sales book for April,” by reading it out onto memory 10, first, the “filenames-for-storage” of the partition files stored in file storage unit 50 are collected by filename presentation unit 60A and then presentation control unit 65A is made to reference the “filename-for-user” corresponding to the collected “filenames-for-storage” using the filename correspondence information in correspondence information storage unit 80A and present the “filename-for-user” to user α. When user α selects the filename, “sales book for April,” in the presented filename list, spread control unit 45A converts this filename to the filenames-for-storage, “JKK777,” “LMM888,” and “PQQ999,” and instructs spread processing unit 40A to perform the reading process on the relevant files.
Since the filename correspondence information are stored inside correspondence information storage unit 80A, filename presentation unit 60A may, in place of performing the process of collecting the “filenames-for-storage” of the partition files stored in file storage unit 50, reference the filename-for-user column of the filename correspondence information in correspondence information storage unit 80A and present the list of filenames of the files stored to the user. However, there is a problem in that in a case where a file stored in file storage unit 50 is deleted due to some reason, a mismatch will arise between the filename correspondence information in correspondence information storage unit 80A and the files that are actually stored in file storage unit 50.
Spread processing unit 40A has a function of synthesizing, based on management information that had been stored somewhere in advance, the plurality of partition files F11 to F13 that are respectively stored in the different data storage devices 51 to 53 and performing spread on memory 10 upon restoration to the original file F1. As a result, the data, which user α stored under the filename, “sales book for April,” are read out from file storage unit 50 and spread again on memory 10.
Lastly, various measures that are taken in putting this invention into practice shall be described.
(1) Filename Conversion Process by the Storage Control Unit
With the present invention, the filename conversion process, whereby a “filename-for-user,” input by a user is converted to a “filename-for-storage” based on a predetermined algorithm, is executed at storage control unit 35. With the example shown in
As a matter of course, the algorithm for the filename conversion process from the “filename-for-user” to the “filename-for-storage” does not necessarily have to be made an algorithm that uses random numbers. For example, a code string that is obtained by applying a hash function to the code string making up the “filename-for-user” may be used as the “filename-for-storage.”
Also, though in the above-described embodiment, a correspondence table indicating the correspondence between the “filenames-for-user” and the “filenames-for-storage” was stored in correspondence information storage unit 80 as the filename correspondence information, the filename correspondence information does not necessarily have to be prepared in the form of a correspondence table. For example, in a case where storage control unit 35 executes the filename conversion process whereby the “filename-for-storage” is generated based on an algorithm of a reversible conversion of the “filename-for-user” to the “filename-for-storage,” as long as information indicating this reversible conversion algorithm are stored as the filename correspondence information, a correspondence table indicating the correspondence of the individual filenames will be unnecessary.
This shall now be described by way of a specific example. Here, suppose that a conversion algorithm of “making the filename-for-storage be the character string obtained by shifting each individual character making up the filename-for-user rearwards by one character in alphabetical order” is established. Using this conversion algorithm, the filename-for-user, “APPLE,” will be converted to the filename-for-storage, “BQQMF,” and the filename-for-user, “BANANA,” will be converted to the filename-for-storage, “CBOBOB.” In this case, though a correspondence table indicating the correspondence of each case, that is, the correspondence of “APPLE” and “BQQMF” and the correspondence of “BANANA” and “CBOBOB” may be prepared, information indicating the conversion algorithm of “making the filename-for-storage be the character string obtained by shifting each individual character making up the filename-for-user rearwards by one character in alphabetical order” may in itself be prepared as the filename correspondence information instead. This is because this conversion algorithm is reversible and since the reverse conversion of “making the filename-for-user be the character string obtained by shifting each individual character making up the filename-for-storage frontward by one character in alphabetical order” is possible, and thus as long as the information indicating this conversion algorithm is available, bidirectional conversion between “APPLE” and “BQQMF” and bidirectional conversion between “BANANA” and “CBOBOB” are enabled even without a correspondence table.
(2) Subjects of the Conversion Process
In many computer operating systems, extensions are employed in filenames. For example, with the filename, “sales book for April.xls,” the portion of “sales book for April” to the left side of the dot is the main filename portion and the portion of “xls” to the right side of the dot is the extension. In this case, if just the main filename portion is subject to the conversion process, a filename-for-storage, such as “RST123.xls,” will be generated for the filename-for-user, “sales book for April.xls.” However, unless the extension portion is subject to the conversion process, the application program that was used to prepare the file or the format of the file can be recognized by seeing the extension portion of the filename-for-storage and this may provide a clue to inferring the contents of the file. Thus, for practical use, the filename conversion process is preferably executed on the entire filename, including the extension portion.
For example, if separate and independent conversion processes are performed on the main filename portion and the extension portion, respectively, a filename-for-storage, such as “RST123.jqz,” will be generated for the filename-for-user, “sales book for April.xls.” In this case, since the extension, “jqz,” is a random extension without meaning, it will not provide a clue to inferring the contents of the file.
Also, depending on the computer operating system, a function, of storing various attribute information, such as timestamps (information indicating the time and date of preparation, time and date of modification, etc., of the file), file volume, and information on the person who prepared the file, along with the data of the file itself, is provided. With an operating system having such a function, these attribute information can be displayed in a list along with the filenames when a filename list of the stored files is displayed. However, such attribute information may also be factors that provide clues to inferring the file contents. For example, if the filename-for-user of “sales book for April” is converted to the filename-for-storage of “RST123,” though the file contents cannot be inferred from the filename, if a timestamp, such as “04-30-2004” is displayed along with the filename of “RST123,” this may provide the clue for the inference that “this file is some form of data for April.”
In order to avoid such an adverse effect, storage control unit 35 is made to execute the conversion process of converting not just the filename but also the contents of the attribute information, such as the timestamps, etc., that are stored along with the file, correspondence information storage unit 80 is made to execute a process of storing not just the correspondence of the filenames but also the correspondence of the attribute information before and after the conversion as the filename correspondence information, and spread control unit 40 is made to execute the process of restoring the contents of the attribute information, which had been changed in the storing process, based on the correspondence of the attribute information before and after the conversion.
In the case of the above example, the file is stored upon conversion of the filename-for-user of “sales book for April” to the filename-for-storage of “RST123” and conversion of the timestamp of “04-30-2004” to a random timestamp, such as “48-95-2345.” In correspondence information storage unit 80, the correspondence of “04-30-2004” and “48-95-2345” is stored along with the correspondence of “sales book for April” and “RST123.” While when the user who carried out the file storage is logged in, the filename and the timestamp will obviously be reconverted and presented by presentation control unit 65 as “sales book for April” and “04-30-2004” as they were, when another user is logged in, the filename and the timestamp will be presented as “RST123” and “48-95-2345.”
(3) Encryption of the Filename Correspondence Information
Though with the above-described embodiment, the filename correspondence information is stored as it is in correspondence information storage unit 80, when another user accesses the interior of this correspondence information storage unit 80, the correspondence between the “filenames-for-user” and the “filenames-for-storage” will be recognized. In particular, when the filename correspondence information is prepared in the form of a correspondence table, the filenames, such as “sales book for April,” “sales book for May,” and “sales book for June,” will appear as they are in the “filename-for-user” column and it is not preferable for such a list of filenames to be seen by other users.
In order to avoid such an adverse effect, correspondence information storage unit 80 is made to execute a process of encrypting and then storing the filename correspondence information and to execute, upon receiving a reference of the filename correspondence information that is stored, a process of presenting the information to be referenced upon decrypting. Since by using a password, etc., unique to each user as a key for the encryption and decryption processes, the filename correspondence information of user α will be encrypted using the password, etc., of user α as the key, the information will not be decrypted when another user is logged in.
This invention is widely applicable to general computer systems that handle data in file units and store a file upon providing some form of filename, and is especially high in utility value in data processing fields, wherein there is a need to ensure adequate security, even for filenames.
Yano, Yoshihiro, Niwata, Syouzou
Patent | Priority | Assignee | Title |
Patent | Priority | Assignee | Title |
5627996, | Aug 19 1992 | AT&T IPM Corp | Method and apparatus for accessing the same computer file using different file name formats |
5778068, | Feb 13 1995 | CYPHERCOMM, INC | Personal access management system |
6788302, | Aug 03 2000 | International Business Machines Corporation | Partitioning and load balancing graphical shape data for parallel applications |
20020103885, | |||
20020116402, | |||
20020133491, | |||
20040002942, | |||
20040093358, | |||
20040123111, | |||
20050050054, | |||
JP2000163295, | |||
JP2000207370, | |||
JP2001188697, | |||
JP2002108870, | |||
JP2002132566, | |||
JP2002288247, | |||
JP2003288247, | |||
JP235535, | |||
JP368042, | |||
JP9204330, |
Executed on | Assignor | Assignee | Conveyance | Frame | Reel | Doc |
Apr 28 2009 | Dai Nippon Printing Co., Ltd. | (assignment on the face of the patent) | / |
Date | Maintenance Fee Events |
May 30 2013 | ASPN: Payor Number Assigned. |
Apr 02 2015 | M1551: Payment of Maintenance Fee, 4th Year, Large Entity. |
Apr 02 2019 | M1552: Payment of Maintenance Fee, 8th Year, Large Entity. |
May 29 2023 | REM: Maintenance Fee Reminder Mailed. |
Nov 13 2023 | EXP: Patent Expired for Failure to Pay Maintenance Fees. |
Date | Maintenance Schedule |
Oct 11 2014 | 4 years fee payment window open |
Apr 11 2015 | 6 months grace period start (w surcharge) |
Oct 11 2015 | patent expiry (for year 4) |
Oct 11 2017 | 2 years to revive unintentionally abandoned end. (for year 4) |
Oct 11 2018 | 8 years fee payment window open |
Apr 11 2019 | 6 months grace period start (w surcharge) |
Oct 11 2019 | patent expiry (for year 8) |
Oct 11 2021 | 2 years to revive unintentionally abandoned end. (for year 8) |
Oct 11 2022 | 12 years fee payment window open |
Apr 11 2023 | 6 months grace period start (w surcharge) |
Oct 11 2023 | patent expiry (for year 12) |
Oct 11 2025 | 2 years to revive unintentionally abandoned end. (for year 12) |